General
- Target 2026-05-22_ba32833674eea39ae3b546461226cc43_elex_smoke-loader_stop
- Size 1.7MB
- Sample260522-qcxrcset5x
- SHA256 8115fecba76b58f239a8d146c8f2a617edddc0c4c224e3143a27bc91589f6f1d
- MD5 ba32833674eea39ae3b546461226cc43
- SHA1 f301d490072d0e204a485701ea32ba2e2e157743
- SHA512 76ff7d1321dc3daaa75084ded17d1d9c1871562979c6f061aeae80b506a3fe48d348f3c86a4aed0e4c0a5486a788bb0ef745529f62027aa39bd41f31c60fe6a9
- SSDEEP 49152:mS1YTuq9qE0S/IfLYmjfAko2Lj6kxs0rdhTlo:JIq0cZfAko23PK
- TLSH T19C857C21A780C537FAE304B4D969456D1D7A3E329F25E1CBA3C8BE4F1AB15C2A631713
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-05-22_ba32833674eea39ae3b546461226cc43_elex_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
13 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-05-22_ba32833674eea39ae3b546461226cc43_elex_smoke-loader_stop.exe
Resource
win11-20260513-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-05-22_ba32833674eea39ae3b546461226cc43_elex_smoke-loader_stop
- Size 1.7MB
- SHA256 8115fecba76b58f239a8d146c8f2a617edddc0c4c224e3143a27bc91589f6f1d
- MD5 ba32833674eea39ae3b546461226cc43
- SHA1 f301d490072d0e204a485701ea32ba2e2e157743
- SHA512 76ff7d1321dc3daaa75084ded17d1d9c1871562979c6f061aeae80b506a3fe48d348f3c86a4aed0e4c0a5486a788bb0ef745529f62027aa39bd41f31c60fe6a9
- SSDEEP 49152:mS1YTuq9qE0S/IfLYmjfAko2Lj6kxs0rdhTlo:JIq0cZfAko23PK
- TLSH T19C857C21A780C537FAE304B4D969456D1D7A3E329F25E1CBA3C8BE4F1AB15C2A631713
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks BIOS information in registry
BIOS information is often read in order to detect sandboxing environments.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-
Drops file in System32 directory